Where Can I Use
This? | What Do I Need? |
The WildFire appliance retains records of analysis
activity within an event log. You can view details about which connected
services or appliances in your network analyzed a particular sample,
as well as how many samples were analyzed in a given time-frame.
You can use this information to monitor activity and develop policies and
countermeasures against malicious activity. Unusually heavy activity
can indicate suspicious activity. Also consider using a threat intelligence
tool such as AutoFocus to investigate and determine the nature of
a threat.